Over a million developers have joined DZone.
{{announcement.body}}
{{announcement.title}}

Other Cloud Platforms Should Follow Heroku's Example of Transparency

DZone's Guide to

Other Cloud Platforms Should Follow Heroku's Example of Transparency

· Cloud Zone ·
Free Resource

Container Monitoring and Management eBook: Read about the new realities of containerization.

Last week, Heroku open sourced id.heroku.com, a key part of their authentication infrastructure, under the very permissive MIT license [ Here's the GitHub repo]. 

I commend their transparency and commitment to open source given that most companies don't open source this information.  It shows that they know enough about their security to be absolutely sure what's okay to open source.  Their argument was also bolstered by this statement: 'Heroku would not exist without open source. Other security sensitive open source software we use include "Rails" and "The Linux Kernel".'

Check out the post about this news, because it's actually a large, informative post about how they use OAuth for SSO, which I'm sure will provide inspiration for some of you.  There are plenty of whiteboard diagrams to illustrate as well.

The Essentials of Container Monitoring: Learn the 4 principles of application containerization. Download Now.

Topics:

Opinions expressed by DZone contributors are their own.

{{ parent.title || parent.header.title}}

{{ parent.tldr }}

{{ parent.urlSource.name }}